Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/t-VhxTcIz6KLX6J27zfU9YugdGo.roa
File: t-VhxTcIz6KLX6J27zfU9YugdGo.roa (raw, json)
Hash identifier: CfIYmZh7Jb5BQwb26zBXnSp7Entxo373J1oPBWhkkSw=
Subject key identifier: B7:E5:61:C5:37:08:CF:A2:8B:5F:A2:76:EF:37:D4:F5:8B:A0:74:6A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189627C29A88E0F677CDEAD5F65C2E13233
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/t-VhxTcIz6KLX6J27zfU9YugdGo.roa
Signing time: Mon 17 Jul 2023 06:14:11 +0000
ROA not before: Mon 17 Jul 2023 06:14:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 84.32.91.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:7c:29:a8:8e:0f:67:7c:de:ad:5f:65:c2:e1:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 17 06:14:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7e561c53708cfa28b5fa276ef37d4f58ba0746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:2d:c3:5c:d8:bb:08:08:4c:df:26:6e:1d:
c1:c0:90:10:90:65:9a:7b:c9:5d:bb:c6:ba:cc:4a:
b2:55:a3:d5:36:b8:8e:3b:a0:59:46:ef:09:4d:62:
72:fe:aa:a3:10:04:43:a5:e2:11:98:e2:a5:b6:8a:
60:58:28:f5:e5:88:53:5c:d7:1a:a8:53:c8:67:40:
07:15:1b:c1:e4:79:dc:cd:68:d8:c9:10:f8:1d:60:
c6:b7:84:33:a8:a3:a3:4e:3a:75:d9:58:4e:1e:4e:
e9:a4:e0:d9:39:dd:2f:4d:b5:60:c1:ec:a3:92:ef:
16:fe:4b:f9:08:c7:98:41:00:0d:08:eb:8b:b1:43:
fb:51:b4:15:3b:a7:a8:22:6a:50:2a:ee:fc:0c:50:
16:db:4c:01:30:ed:1c:da:30:09:db:07:54:5b:dd:
d1:de:2f:10:e9:b7:7e:d4:e9:44:09:c2:8f:25:9d:
87:54:05:fe:79:5e:a5:73:0d:a3:77:80:89:38:2c:
b4:c2:8e:6a:6f:ca:85:ed:55:8e:0b:30:d3:57:86:
1c:4b:f0:0f:1e:14:4a:28:1a:59:85:13:e5:d4:c3:
db:df:54:d4:ed:3d:19:36:67:19:5b:d9:49:1a:fa:
5a:e3:0e:b6:ce:92:15:f2:a4:dc:88:c8:e0:1a:9c:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:61:C5:37:08:CF:A2:8B:5F:A2:76:EF:37:D4:F5:8B:A0:74:6A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/t-VhxTcIz6KLX6J27zfU9YugdGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.91.0/24
88.216.22.0/24
88.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7d:d1:67:6c:34:7d:87:b0:45:c0:cb:7f:8f:14:56:8f:cf:
6b:e9:8f:f4:e0:38:fb:b6:33:78:ef:fd:81:0b:98:a8:5a:fc:
0e:29:5e:b3:18:5c:6b:0a:9f:47:d4:0b:81:ba:76:ab:85:b8:
5f:bc:bf:7e:6b:ad:4a:ce:9e:7d:28:89:b1:d6:77:5e:97:b4:
25:19:24:83:a5:ca:b9:44:b8:8b:22:5a:f4:5d:72:99:25:ce:
0f:fc:26:34:e8:41:9f:28:4f:6f:a0:3b:4d:1d:4f:5e:e3:12:
30:38:5e:bd:61:07:e1:cb:13:59:d3:7c:42:be:23:2f:a1:a8:
7b:2d:30:27:20:b2:c3:30:03:9f:be:15:c7:65:a9:74:bb:1a:
9d:cc:24:fb:29:3c:9a:90:67:19:3d:13:8c:19:47:da:9f:b1:
a8:ca:8a:f2:64:05:a2:18:83:e1:91:0a:f4:38:f0:b0:0a:49:
af:5a:8d:91:c1:62:ff:1a:e3:16:25:60:58:c4:90:41:07:d5:
f2:8c:38:e6:50:16:21:76:dd:c7:0c:20:a0:5c:d4:e8:e6:39:
9f:03:7a:3e:26:1b:97:44:9a:d0:1d:d6:48:84:77:fb:a8:24:
e6:16:2d:ed:3b:72:c8:87:e9:68:7a:ff:98:c4:ba:61:b3:66:
e2:d0:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 11:44:28 2023 by rpki-client on console-fra.rpki-client.org